Re: CVS commit: pkgsrc/www/squid3

[Takahiro Kambe <taca%NetBSD.org@localhost>]

Hi,

In message <20150504091335.2557F98%cvs.netbsd.org@localhost>
        on Mon, 4 May 2015 09:13:35 +0000,
        "Adam Ciarcinski" <adam%netbsd.org@localhost> wrote:
> Module Name:  pkgsrc
> Committed By: adam
> Date:         Mon May  4 09:13:35 UTC 2015
> 
> Modified Files:
>       pkgsrc/www/squid3: Makefile distinfo options.mk
>       pkgsrc/www/squid3/patches: patch-configure
> 
> Log Message:
> Changes 3.5.4:
Would you please pull up this release to pkgsrc-2015Q1?

* CVE-2015-3455 : SQUID-2015:1 Incorrect X509 server certificate valdidation

> * Fix X509 server certificate domain matching
> * Bug 3775: Disable HTTP/1.1 pipeline feature for pinned connections
> * Cleanup: Display correct error code in debugging output for IoCallback::finish
> * Cleanup: Fix spelling error in debug message in parseHttpRequest()
> * Cleanup: Add whitespace to make debug message in writeComplete() more readable
> * Add Kerberos support for MAC OS X 10.x
> * Bug 4234: comm_connect_addr uses errno incorrectly
> * Fix 'access_log none' to prevent following logs being used
> * Unexpected SQUID_X509_V_ERR_DOMAIN_MISMATCH errors while accessing sites with valid certificates
> * Docs: Update CONTRIBUTORS
> * Ensure class Lock counter remains within bounds
> * Portability: Add hacks to define C++11 explicit N-bit type limits
> * Fix SSL_get_peer_certificate memory leak
> * Bug 4231 pt2: comm_open_uds does not provide description for newly opened FD
> * Bug 4231 pt1: fd_open() not correctly handling empty descriptions
> * Negotiate Kerberos authentication request size exceeds output buffer size.
> * Do not increment an iterator invalidated by std::map::erase().
> * Fix require-proxy-header preventing HTTPS proxying and ssl-bump
> * Fix atomics check broken by C++11 #include added in v3.5 branch r13783
> * Support for resuming TLS sessions
> * Bug 4212: ssl_crtd crashes with corrupt database
> * Fix rev.13795 ServerName class
> * Add server_name ACL matching server name(s) obtained from various sources
> * Bug 4226: digest_edirectory_auth: found but cannot be built
> * Invalid request->clientConnectionManager object used by Ssl::PeerConnector::handleNegotiateError
> * Bug 4198: assertion failed: client_side.h:364: "sslServerBump == srvBump"
> * Fix cross-compile issues with SSL_get_certificate()
> * Docs: RFC 7238 obsoleted by RFC 7538
> * Boilerplate: reference Translator copyrights in CREDITS
> * Cleanup: Place explicit size on ref-count lock counter
> * Cleanup: extend SBuf debugging information
> * digest_edirectory_auth: Fix -lnettle dependency error

Best regards.

-- 
Takahiro Kambe <taca%NetBSD.org@localhost>/<taca%back-street.net@localhost>